Privacy Policy

Last updated: October 15, 2026

This policy explains, in plain language, what happens to information when you use Low Poly Pictures. Parents and guardians: please read section 7, For parents.

1. Who we are

Low Poly Pictures is a free movie maker that runs in your web browser. It is run by Keller Concepts in the United States (“we”, “us”). This policy covers the website lowpolypictures.com, the movie maker at lowpolypictures.com/studio/ (“the studio”), and lowpoly.mov, which only forwards visitors to lowpolypictures.com.

For the small amount of personal information described here, we are the “controller” (as European and UK law call it) and the “operator” (as the US Children's Online Privacy Protection Act, COPPA, calls it). You can reach us at:

• Email: hello@lowpolypictures.com (the quickest way)
• Post: 10302 East 71st South #1008, Tulsa, OK 74133, USA
• Phone: +1 405-582-0317

This policy doesn't cover other websites we link to, such as GitHub, where our open-source code is published. They have their own privacy policies.

2. What we don't collect

• No accounts or sign-ups, and no forms asking for your name, email address, age or anything else.
• No advertising and no ad networks. No social media buttons, and no videos or other content embedded from other companies.
• No cookies set by us, and no tracking cookies of any kind. (Cloudflare may set one security cookie in rare cases; see section 5.)
• No fingerprinting, no tracking across other websites and no precise location.
• No selling or sharing of personal information, and no profiles of anyone.
• Your movies are never sent to us, so we can't look at them, use them, or use them to train AI.

3. What stays on your device

The studio runs entirely inside your browser. What you make is saved there, on the device you're using, and is not uploaded to us or to anyone else:

• Your movies, saved in your browser's storage when you choose to save.
• A recovery copy of the movie you're working on, so that closing the tab by accident doesn't lose your work. It is updated while you have unsaved changes and deleted once they're saved. If one is left over from an earlier visit, the studio keeps it as a movie called “Recovered movie” with the date.
• Files you add with “Open from your computer…” (for example a movie or a sound file). They are copied into your browser's storage so the studio can use them.
• Voice recordings. The studio can record sounds with your microphone. Your browser asks for your permission first; you can say no, or change your mind later in the browser's settings. Recordings are stored only inside your movie, on your device.
• Words you type, such as movie names and 3D titles, which are part of your movie.
• Settings: volume, HD stage, smooth colours and TV look, plus the studio's own preferences file.
• Downloaded content: the actors, sets, sounds and pictures the studio downloads from our site are kept in your browser so that it starts faster next time.
• Exports: videos and GIFs are made inside your browser and saved to your downloads folder.

The studio also checks a few things about your browser and device, such as whether there's a mouse and roughly how much memory the device has, to show helpful tips. These checks happen on your device, and the results aren't sent to us.

Good to know:

• Because none of this reaches us, we can't see it, recover it or delete it for you. You're in control of it.
• Anyone who uses the same browser on the same device can open the movies saved there.
• When you download a movie or export a video and give it to someone, everything in it goes along, including voice recordings and any text you typed.
• Browsers sometimes clear stored data, for example when a device runs low on space. When you save a movie, the studio asks your browser to keep its storage (“persistent storage”); some browsers ask you first. Use “Download movie” to keep copies of the movies that matter to you.

To delete everything this site has stored, clear the site's data in your browser (usually in the browser's privacy settings, or by clicking the icon next to the web address). Download any movies you want to keep first.

4. What happens when you visit

We don't run our own servers. The site is hosted and protected by Cloudflare, Inc. on its worldwide network.

Delivering the site and keeping it safe

Every time your browser asks any website for a page or a file, it sends standard technical information with the request: your IP address, your browser and operating system type (the “user agent”), the address requested, the page that linked to it (the “referrer”), and the date and time. Cloudflare uses this information to deliver the site to you and to protect it, for example by blocking attacks and abusive automated traffic.

• We don't keep logs of visits. Cloudflare's dashboard can show us limited details about requests that its security features block or challenge, which can include IP addresses. We look at these only to protect the site.
• Cloudflare acts as our service provider (“processor”) under its data processing terms. It may also use some of this information for its own purposes, such as keeping its network secure, as its privacy policy describes.

Visit statistics (Cloudflare Web Analytics)

To learn which pages people use and how quickly the studio loads, we use Cloudflare Web Analytics. A small script from Cloudflare (loaded from static.cloudflareinsights.com) runs on our pages and sends Cloudflare:

• the page you viewed and the page that linked to it;
• how long the page took to load and respond, and how much memory it used;
• your browser, operating system and type of device;
• a random number for that single page view, which isn't stored on your device or reused.

Cloudflare works out your country from your IP address and then discards the IP address; it doesn't store it. According to Cloudflare, the script uses no cookies or other storage on your device, doesn't fingerprint you and doesn't track you across websites. We only see totals, such as how many visits a page had, from which countries, with which browsers, and how fast pages loaded. Cloudflare keeps the detailed records for 7 days, then reduces them to a sample for longer-term statistics; we can see up to the last six months.

Visitors in the European Union aren't counted: we've set Web Analytics to exclude them, so the script isn't loaded for them and Cloudflare drops statistics collected through its EU data centres.

If you'd rather not be counted, block static.cloudflareinsights.com with your browser's tracking protection or a content blocker. The site and the studio work the same without it.

5. Cookies and other storage on your device

We don't use cookies. To give you the movie maker you asked for, the studio stores the following in your browser. It stays on your device and isn't sent to us.

• Your movies, files you add, the recovery copy and the studio's preferences file. Where: IndexedDB (database “/home/web_user”). When: as you save, add a file or change preferences; the recovery copy while you have unsaved changes. How long: until you delete them or clear the site's data.
• The studio's data package (fonts and musical instruments, about 10 MB). Where: IndexedDB (“EM_PRELOAD_CACHE”). When: the first time the studio loads. How long: replaced when a new version comes out; until you clear the site's data.
• Downloaded actors, sets, sounds and pictures. Where: Cache Storage (“lpp-content-…”). When: as the studio uses them. How long: older versions are deleted automatically when we update the content; until you clear the site's data.
• Settings (lpp-volume, lpp-hd, lpp-hd-colour, lpp-tv). Where: local storage. When: only when you change that setting. How long: until you change it again or clear the site's data.
• Security cookie cf_clearance, set by Cloudflare, not by us. When: only if Cloudflare shows a security check, for example during an attack on the site. How long: a short time, set by Cloudflare.

Your browser also keeps its normal cache of the pages and files you load. Everything above is needed to provide the studio you choose to use or, for Cloudflare's cookie, to keep the site secure. None of it is used for analytics, advertising or tracking. Under European and UK rules this kind of storage doesn't need consent; you can still remove it at any time by clearing the site's data, and settings are only stored when you change them.

6. When you email us

Our address hello@lowpolypictures.com is forwarded by Cloudflare Email Routing (which, Cloudflare says, doesn't store or read the messages it forwards) to our mailbox at Google (Gmail). When you write to us, we receive your email address, your name if your email program includes it, whatever you write, any attachments, and the usual technical details of an email.

We use it only to answer you, to fix problems you report, and to deal with legal matters such as copyright notices. We don't add you to a mailing list or send you marketing. Please don't send personal details we don't need.

Children: if we learn that a message came from a child under 13, we'll use the email address only to reply to that one message (or to suggest that a parent contact us), won't contact the child again, and will delete the message and the address promptly after replying.

7. For parents

Low Poly Pictures is made for everyone: grown-ups who made movies like this in the 1990s, and the kids they make movies with today. Children are very welcome, and younger ones have the most fun with a parent nearby.

What we collect from children

Nothing that identifies them. A child using the studio is treated exactly like everyone else: no accounts, no chat, no messages to other users, no way to publish anything through the site, no ads and no tracking. The only information that leaves the device is the technical information described in section 4, which Cloudflare handles for every visitor.

COPPA counts an IP address as a “persistent identifier”. Through Cloudflare, we use it only for the internal operations the law allows without a parent's consent: delivering the site (network communications), keeping the site and its visitors secure, and checking, in totals, that the site works well (maintaining and analysing how it functions). To make sure it isn't used to contact or profile anyone, we show no ads, keep no logs of visits and never combine this information with anything else; Cloudflare discards IP addresses from our visit statistics, and as our service provider it is bound by data processing terms that limit how it may use the data.

Microphone and voice recordings

The studio's sound recorder can only use the microphone after your browser asks for permission. A recording stays inside the movie on your device and is never sent to us. If your child wants to share a movie or video that contains their voice, that's a family decision: the file goes wherever it is sent.

Your choices and rights

• See and delete what's stored. Everything your child made is in the browser on your device. Open the studio to look through the movies, or clear the site's data to delete everything (see section 3).
• Turn off the microphone. Block microphone access for lowpolypictures.com in your browser's settings. The studio still works; it just can't record.
• If your child emailed us, you can ask to see the message, ask us to delete it, and tell us not to collect anything further. We'll take reasonable steps to check that you're the parent or guardian first.
• Before anything new. If we ever add features that would collect personal information from children, such as sharing movies online, we'll update this policy before they start and, where the law requires it, ask for a parent's permission first.

Tips

• Remind children not to say or type their full name, address, school or other personal details in a movie they plan to share.
• On a shared computer, anyone using the same browser can open the movies saved in it. Download important movies to keep them safe.

Teenagers are treated the same way: everything is private by default, with no profiles, no ads and nothing public.

8. Legal bases (EEA, UK and Switzerland)

• Delivering the site and keeping it secure (request information, section 4): legitimate interests in running a working, secure website (GDPR Art. 6(1)(f)).
• Visit statistics (section 4): legitimate interests in understanding, in totals, how the site is used and how well it works, with a tool designed not to identify visitors.
• Answering your email (section 6): legitimate interests in answering people who contact us; when you exercise your privacy rights, our legal obligation (Art. 6(1)(c)).
• Legal claims and complying with the law (the relevant correspondence): legal obligation, and legitimate interests in establishing or defending legal claims.
• Storage on your device (section 5): strictly necessary for the service you request, under the ePrivacy rules and the UK's PECR. We don't receive this information.

Where we rely on legitimate interests, we have weighed them against your rights and freedoms, especially those of children, and we keep the information to a minimum. You can object at any time (section 12). You don't have to give us any personal information to use Low Poly Pictures, and no decisions are made about you by automated means.

9. Who receives information

• Cloudflare, Inc. (USA): hosting, security, visit statistics and email forwarding.
• Google LLC (USA): our mailbox (Gmail), for messages you send us.
• Authorities or others, when the law requires it, for example to respond to a valid legal order, or when needed to protect someone's safety.
• A successor. If Low Poly Pictures is ever transferred (for example, to a company set up to run it), this information would go with it, still covered by this policy, and we'd say so on the site.

We don't sell personal information, we don't share it for cross-context behavioural advertising, and we don't give it to anyone for their own marketing.

10. International transfers

We're based in the United States. Cloudflare handles requests at the data centre nearest to you, wherever that is, and Cloudflare and Google may process information in the United States and other countries. For personal information from the EEA, the UK and Switzerland, Cloudflare and Google LLC rely on their certifications under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, and on standard contractual clauses where those apply.

11. How long information is kept

This is also our written data retention policy under COPPA. The only personal information about children we could have is the technical information in section 4, which we use only for the internal operations described in section 7 and don't store ourselves, and an email a child sends us, which we keep only until we've replied. We never keep children's personal information longer than reasonably necessary for the purpose it was received for.

12. Your privacy rights

Wherever you live, you can ask us:

• whether we have personal information about you, and for a copy of it;
• to correct it or delete it;
• to stop or limit using it, or object to how we use it;
• to give it to you, or to another service, in a format you can use (portability).

In practice, the only personal information we can link to you is email you've sent us. We don't store the technical information from section 4 in a way we could look up by person, and we can't see anything on your device, so we may not find anything else; if so, we'll tell you. You can view and delete what's saved on your device yourself (section 3).

To make a request, email hello@lowpolypictures.com with the subject “Privacy request”. We may ask for information to confirm it's you (for example, that you write from the same email address). We'll answer within one month, or 45 days for requests under US state laws, and tell you if we need more time where the law allows it. Requests are free. You can make a request through an authorised agent; we may ask for proof that they act for you. We won't treat you differently for using your rights.

If we turn down your request, you can ask us to reconsider by replying to our answer (an appeal). If you're still not satisfied, you can contact your state attorney general in the US, or a data protection authority in the EEA, the UK or Switzerland, such as the UK Information Commissioner's Office (ico.org.uk) or the authority where you live or work.

13. Notice for California and other US states

US state privacy laws, such as the California Consumer Privacy Act, mostly apply to businesses much larger than ours, but we follow their principles anyway. In the past 12 months:

• Categories collected: identifiers (IP address, handled by Cloudflare; your email address, if you write to us); internet activity (pages viewed, referrer and performance information); approximate location (country, worked out from the IP address); and whatever you choose to put in an email. No sensitive personal information.
• Sources: you and your browser.
• Purposes: as described in sections 4 to 6.
• Disclosed for business purposes to: our service providers, Cloudflare and Google.
• Sold or shared: none. We don't sell or share personal information, including that of anyone under 16, and we don't use it for targeted advertising or profiling.

Global Privacy Control and Do Not Track. We treat a Global Privacy Control signal as a request to opt out of the sale and sharing of personal information. Because we never sell or share it, nothing more needs to happen, and the site works the same. Do Not Track signals get the same answer: we don't track visitors across websites and don't let other companies do so through our site, so there's no tracking to switch off.

California “Shine the Light”. We don't give personal information to anyone for their own direct marketing.

14. Security

We keep very little information, which is the best protection there is. The whole site uses encrypted connections (HTTPS, enforced with HSTS), a strict content security policy limits what can run on our pages, we run no database of visitors, and only the people who run Low Poly Pictures can access its hosting and email accounts. No system is perfectly secure, but if a security incident ever affected personal information, we would inform the people affected and the authorities as the law requires.

15. Changes to this policy

We'll update this page whenever our practices change, and change the date at the top. Before we start collecting any new kind of personal information, for example if we add sharing movies online, accounts or donations, we'll update this policy first and, for important changes, show a notice on the home page. Where the law requires your consent (or a parent's), we'll ask for it before anything changes.

16. Contact

Questions or requests about privacy: hello@lowpolypictures.com. Post: 10302 East 71st South #1008, Tulsa, OK 74133, USA. Phone: +1 405-582-0317.